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Preface 


Preface 


Welcome to Oualys Browser Recorder! This user guide describes how to install Oualys 
Browser Recorder extension in your Chrome browser. 


USE OF THIS EXTENSION SHALL BE DEEMED TO BE ACCEPTANCE OF THESE TERMS. THIS 
EXTENSION IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS 
HEREBY DISCLAIMS ALL LIABILITY FOR THE PROVISION OR USE OF THIS EXTENSION. 


About Qualys 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud-based security and 
compliance solutions. The Qualys Cloud Platform and its integrated apps help businesses 
simplify security operations and lower the cost of compliance by delivering critical 
security intelligence on demand and automating the full spectrum of auditing, 
compliance and protection for IT systems and web applications. 


Founded in 1999, Qualys has established strategic partnerships with leading managed 
service providers and consulting organizations including Accenture, BT, Cognizant 
Technology Solutions, Deutsche Telekom, Fujitsu, HCL, HP Enterprise, IBM, Infosys, NTT, 
Optiv, SecureWorks, Tata Communications, Verizon and Wipro. The company is also a 
founding member of the Cloud Security Alliance (CSA). 


You can try the security and compliance solutions offered by Qualys for free using Qualys 
Community Edition. 


For more information, please visit www.qualys.com 


Get Started 


Get Started 


Thank you for your interest in Oualys Browser Recorder! 


mi 


This document tells you all about Qualys Browser Recorder. We'll tell you about the 
requirements, Installation Steps, Uninstallation Steps, features and more. 


Introduction to Qualys Browser Recorder 


Qualys Browser Recorder is a free browser extension to record & play back scripts for web 
application automation testing. Qualys Browser Recorder includes the entire Selenium 
Core, allowing you to capture web elements and record actions in the browser to let you 
generate, edit, and play back automated test cases quickly and easily. It also allows you to 
select a UI element from the browser's currently displayed page and then select from a list 
of Selenium commands with parameters. 


Let's see how Qualys Browser Recorder evolved: 


- Qualys Web Application Scanning (WAS) supported playing back scripts recorded from 
the old Selenium IDE Firefox extension, which broke when Firefox 55 was released 


TD 


- The scripts allow the scanner to navigate complex authentication and workflows 


mi 


- This new Chrome extension is designed to be essentially a more powerful and modern 
replacement for Selenium IDE 


- It's designed to be compatible with existing scripts recorded originally from Selenium IDE 
If you are not familiar with Qualys WAS or the other security and compliance solutions 
offered by Qualys, feel free to try the Qualys Community Edition. 

Qualys Browser Recorder Features 


Qualys Browser Recorder was developed based on Web Extensions API and supports 
running on Chrome browser. It retains all the features of the Selenium IDE and provides 
numerous advanced enhancements. 


-Allows you to save test case scripts in HTML format 
-Easy to use interface style and locators with target element selection. 
-Supports opening, editing and running multiple test suites in one panel. 


-Supports automatic triggering of test suites and processing them sequentially. 


Qualys Browser Recorder Version 


You can easily locate the version of Qualys Browser Recorder above the toolbar. 


© Qualys Browser Recorder 1.2.19 19 


Version -0 x 


Gualys Browser Recorder Prereguisite 
Installation 


Installation 


It's easy to install Qualys Browser Recorder. We'll walk you through the steps quickly. 
Qualys Browser Recorder Prerequisite 
Installing Qualys Browser Recorder 


Uninstalling Qualys Browser Recorder 


Qualys Browser Recorder Prerequisite 


You just need to download and install the latest version of the Chrome web browser. 


The user needs to be aware of basics of Javascript and HTML concepts to execute effective 
and successful automation test scripts. 


QBR can also be installed and used with the latest Microsoft Edge browser. 


Installing Qualys Browser Recorder 
Here are the steps for quick installation of Qualys Browser Recorder: 


Step 1: Open the Google Chrome browser and go to Chrome Store. Search for Qualys 
Browser Recorder in the Chrome store. 


USE OF THIS EXTENSION SHALL BE DEEMED TO BE ACCEPTANCE OF THESE TERMS. THIS 
EXTENSION IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS 
HEREBY DISCLAIMS ALL LIABILITY FOR THE PROVISION OR USE OF THIS EXTENSION. 


Step 2: Once the web page is loaded, click Add to Chrome. 


Search for Qualys Browser 


e Qualys Browser Recorde x A @ Recorder in Chrome Store 
< G | & Secure | https://chrome.google.com/webstore/detail/qualys-browser-recorder/haainhfanpobbliabiinhcimclbkagdp * uo : 
Apps E Tech Publications-E D Training (€ PODilogin (9 POd4 (9 POd4 D QWEBBO YF System Dashboard- EU 1: Make a great reco 


To} Qualys Browser Recorder ciick add to chrome 6 


Developer Tools 


OVERVIEW REVIEWS RELATED 


Installing Gualys Browser Recorder 
Installation 


Step 3: Click Add extension in the new pop-up window that is displayed. 


Qo Add “Qualys Browser Recorder"? 


It can: 
Read and change all your data on the websites you visit 
Display notifications 


Manage your downloads 


Add extension | Cancel | 


What happens next? 


As soon as you complete the installation steps, a small pop window is displayed indicating 
Oualys Browser Recorder has been successfully added to your browser. 


& Qualys Browser Recorder- Che X | + SA 
< C d htips//chromegoogle.com, t ick k f t * O % d o 
HI Apps Qualys - My Applic D Vulnerability Mana Documentation | Q Welcome | Qualys x Hi 
9 bd . o Qualys Browser Recorder has been 
added to Chrome 
@ chrome web store x | dati 
Manag s in the 
Home > Éxtensions > Qualys Browser Recorder 


Qualys Browser Recorder 


Offered by: Qualys Inc 


st e Ye se 5 | Developer Tools | 2, 3.124 users 


Overview Reviews Support Related 


How do I access Qualys Browser Recorder? 


Simply click the Qualys Browser Recordericon 9 in the menu bar to access and use 
Qualys Browser Recorder anytime you want. 


Uninstalling Gualys Browser Recorder 
Installation 


Uninstalling Gualys Browser Recorder 


Step 1: Open Chrome browser and right-click on Oualys Browser Recorder icon in the 
menu bar. and simply select Remove from Chrome or select Manage Extensions. 


ei O x 
DOG o: 
C Qualys Browser Recorder 


- 
Remove from Chrome... 


Hide in Chrome menu 


Manage extensions 


The Extension web page opens with Qualys Browser Recorder extension selected. 


Step 2: Click Remove extension icon located at the bottom of the page. 


= Extensions Q Developer mode @ 


€ Q  Qualys Browser Recorder 


off B 


Description 


Qualys Browser Recorder is a free browser extension to record & play back scripts of any web application. 
edi eo ad “see amm el 배서 dn gere a 
parte a ebsite 


View in Chrome Web Store 


Source 


Chrome Web Store 


Remove extension > 


Step 3: Click Remove in the Confirm Removal pop up window. 


O Remove "Qualys Browser Recorder"? 


Report abuse © 


co EM 


Qualys Browser Recorder User Interface 


Qualys Browser Recorder User Interface 


Let us get familiar with the various tools, panes and menu options that Qualys Browser 
Recorder provides us: 


Tool Bar 


Test Suite Pane 
Editor Pane 
Log Pane 
Reference Pane 
Save Pane 

Hot Keys 


Commands Supported 
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Knowing Qualys Browser Recorder 
Qualys Browser Recorder User Interface 


Knowing Qualys Browser Recorder 


Let's take a look at the various panes and toolbar options in Qualys Browser Recorder. 


Command Target 


Automation Test Suite * doubleClickAt 
Step 1* dragAndDrop 
Step 2” 
Step 3* 
Development Test Suite Ed ito r Pa ne 


* 


Step 1* + = & B 
Step 2 ^ 
Command dragAndDrop 


Test Suite 


Pane 
Passed:0 Failed: 0 


Reference 


Log/Reference 


dragAndDrop(locator, movements String) 
Arguments: Pa ne 


e locator - an element locator 
“ movementsString - offset in pixels from the current location to which 
the element should be moved, e.g., "+70,-300" 


Tool Bar 
Become familiar with the toolbar buttons. 


Icon Name Description 


Record Starts and ends your recording session. Each 
browser action is entered as a Selenium 
command in the editor. 


Playback Speed Controls the speed of your text script execution. 
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7001 Bar 
Qualys Browser Recorder User Interface 


Name Description 


Play Current Test Sequentially plays all the test cases of selected 
Case test suite listed in the Test Suite pane. 


Play Current Test Sequentially plays all the test suites listed in the 
Suite Test Suite pane. 


BM: 


Play Entire Test Stops your playback. 


test case script in HTML format. 


Suites 
| & 
Pause/Resume Pauses or resumes your playback. 
Save Allows you to display, copy and save the selected 


Note that Selenium IDE HTML format must be 
used for compatibility with Qualys Web 
Application Scanning (WAS). 


Test Suite Pane 


The Test Suite pane is where you'll view your test suites and test cases. 


Test Suites = + --Open more than one test suite at a time. 


— --View the list of currently opened test suites. 
Step 1 


Step 2 --When you open a test suite, the test suite pane will 
ai automatically list all the test cases contained in it. 
Developement Test Suite * -- 1116 highlighted test case is the currently selected 
v Step 2 test case. After playback, each test case has correct or 
Step 3* wrong sign icon to represent if it has passed or failed 
respectively. At the bottom portion is a summary of 
the number of test cases that were run and failed. 
Passed: 1 Failed: 0 
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7001 Bar 
Oualys Browser Recorder User Interface 


Editor Pane 


You can think of the editor pane as the place where all the action happens. This is where 
you create and modify test case commands. After playback, each step is color-coded. 


Command Target Value 


https://www.google.co.in/?gfe_rd=c 


open r&dcr-0&ei-rPJ3WryDE6OcX5fEg 

PgD 
click eso Right-click Menu options 
type id-Ist-ib 1318 


E Copy Ctrl+C 
sendKeys id-Ist-ib 


Paste Ctri+V 
ET link=Stock News, Latest Stock Mar 


Editing Insert New Command 
w Col 
Command type Too | ba r EE 
Clear All 
Target id-Ist-ib 
Toggle Breakpoint 
Value latest stock market Ctri+B 


Execute This 
Command 


The Command, Target, and Value entry fields display the currently selected command 
along with its parameters. These are entry fields where you can modify the currently 
selected command. You can select a command and use the right-click menu options or 
editing toolbar to achieve various tasks such as copying the command, inserting new 
command or clearing all the commands, executing the command, and so on. 
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Editing Toolbar 


Tool Bar 
Oualys Browser Recorder User Interface 


Icon Name Description 

+ Add Inserts a command 

= Delete Deletes the selected command. 
t Copy Copies the selected command 
r. Paste Pastes the copied command 
Log Pane 


The Log pane displays runtime messages during execution. It provides real-time updates 
as to what Qualys Browser Recorder is doing. 


Log Reference 


[info] Test case passed 


Clear Logs 


ur 


[info] Executing: | open | https://www.google.co.in/?gfe rd-cr&dcr-e&ei-rPJ3WryDE&OcX5fEgPgD | | 


[info] Wait for the new page to be fully loaded 


[info] Executing: | click | id=lst-ib | | 


[info] Executing: | type | id-lst-ib | latest stock market | 


These messages are often useful for test case debugging. You can clear the logs by clicking 


the clear logs button. 
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7001 Bar 
Oualys Browser Recorder User Interface 


Reference Pane 


'The Reference pane shows a concise description of the currently selected command in the 
Editor pane. It also shows the description about the locator and value to be used on that 
command. 


Test Suites E + Command Target 
Development Test Suite open https-//www.qualys.cor 
w Step 1 click link=Web App Security 
Automation Test Suite click IIdiv[4yuVli/a/span[2] 
Step 1 click css-span.q-play-butto 
Step 3 click css-svg.q-modal clo 


Step 2 


+ 8B & E 


Command Click 
Target link=Web App Security E 


Passed:1 Failed:9 | Value 


Log Reference 


click(locator) 
Arguments: 


e locator - an element locator 


Clicks on a link, button, checkbox or radio button. If the click action causes a new 
page to load (like a link usually does), call waitForPageToLoad 


The number of parameters provided must match the number specified, the order of 
parameters provided must match the order specified, and the type of parameters provided 
must match the type specified. If there is a mismatch in any of these three areas, the 
command will not run correctly. 


Save Pane 


The Save pane allows you to copy and save a test case in its raw form. Currently, two file 
formats are supported: Selenium IDE HTML and Sidex HTML format. By default, scripts 
are downloaded in Selenium IDE HTML format. Note that Selenium IDE HTML format is 
required for compatibility with Qualys Web Applciation Scanning (WAS). 
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7001 Bar 
Oualys Browser Recorder User Interface 


To view the test case in its native form, click the save button on the toolbar. Click the 
Format drop-down to switch and change the HTML format. 


Development 


Passed: 1 


page to load 


Selenium IDE HIML | Formats 


Selenium IDE HTML KN 


A SCIIDTD XHTML 1.0 
Strict//EN" gea eba w3.org/TR/xhtml1/DTD/xhtml1- 
strict. dtd"> 
<html xmins-"http-//www.w3.org/1999/xhtml" 
xml:lang="en" lang="en"> 
<head> 
<meta http-equiv-"Content-Type" content="text/html; 
charset=UTF-8" /> 
<link rel-"selenium.base" href-"https-//www.qualys.com/" 
hm 
<title>Development Test Suite</title> 
</head> 
<body> 
<table cellpadding="1" cellspacing="1" border="1"> 
<thead> 
<tr><td rowspan="1" colspan="3">Step 1</td></tr> 
</thead> 
<tbody> 
<tr><td> open</td><td=https:/www.qualys.com/</td><td> 
«ftd» 
«ite 
<tr><td>click</td><td>link=Web App Security</td><td> 
</td> 
«ftr 


Copy to Clipboard Save As File 


It displays the test case in the native format (HTML) in which the file is stored. 
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Hot Keys 
Oualys Browser Recorder User Interface 


Hot Keys 

You could try some of the shortcut keys for common actions. Try it out. 
Keys Description 

Ctrl + S Save a test suite. 

Ctrl + O Open a test suite. 

Ctrl + P Play this test case. 

Ctrl +I Insert a new command. 

Ctrl + A Select all commands. 

Ctrl + X Cut a command. 

Ctrl + C Copy a command. 

Ctrl+V Paste a command. 

Del Delete the selected command (s). 
Ctrl + B Toggle a breakpoint. 


Commands Supported 


We provide over 500 commands in Qualys Browser Recorder. This is a list of most 
commonly used commands required for building a test case. See Command Reference 
chapter for the complete list of commands. 


Command Description 

open Opens an URL in the test frame. This accepts both relative and 
absolute URLs. The "open" command waits for the page to load 
before proceeding, ie. the "AndWait" suffix is implicit. 


click Clicks a link, button, checkbox or radio button. If the click action 
causes a new page to load (like a link usually does), call 
waitForPageToLoad. 

waitForPageToLoad Waits for a new page to load. 


waitForElementPresent Verifies that the specified element is somewhere on the page. 


verifyText Gets the text of an element. This works for any element that 
contains text. This command uses either the textContent (Mozilla- 
like browsers) or the innerText (IE-like browsers) of the element, 
which is the rendered text shown to the user. 


sendKeys Simulates keystroke events on the specified element, as though 
you have typed the value key-by-key. 

type Sets the value of an input field, as though you have typed it in. 

pause Wait for the specified amount of time (in milliseconds). 

mouseOver Simulates a user hovering a mouse over the specified element. 
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Commands Supported 
Oualys Browser Recorder User Interface 


Command Description 

verifyTextPresent Verifies that the specified text pattern appears somewhere on the 
rendered page shown to the user. 

selectFrame Selects a frame within the current window. 
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Step 1: Recording 
Building Test Cases 


Building Test Cases 


You could build a test case from scratch involving the following steps: 
Step 1: Recording 

Step 2: Editing 

Step 3: Saving a test case 

Step 4: Running test cases 


Example 


Step 1: Recording 


Many first-time users begin by recording a test case from their interactions with a website. 
When you open Qualys Browser Recorder, the record button is at the upper right corner. 
Click the record button and it will start recording your actions. 


During recording, Qualys Browser Recorder automatically inserts commands into your 
test case based on your actions. Typically, this may include: 


--clicking a link - click or clickAndWait commands 


- entering values - type command 


--selecting options from a drop-down listbox - select command 
--clicking check boxes or radio buttons - click command 


Qualys Browser Recorder records full URL paths for commands that store URL path. For 
example, the "Open" command records the full URL path of the opened Website. If you 
import a script that has relative paths, Qualys Browser Recorder automatically converts 
these to full paths while importing. 


Step 2: Editing 

Once you complete recording the interactions, you could either edit the commands or 
insert new commands. 

Inserting a Command 


Select the command and then right-click and select Insert Command from the right-click 
menu; the Qualys Browser Recorder will add a blank line just below the line you selected. 
Alternatively, you can click ‘+’ in the Editing toolbar. 


Now, use the command editing text fields to enter your new command and its parameters. 
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Step 3: Saving a test case 
Building Test Cases 


Editing a Command 


Simply select the line to be changed and edit it using the Command, Target, and Value 
fields. 


Note that advanced users can open a saved test case script in a text/xml editor and edit 
the script. 


Step 3: Saving a test case 


Qualys Browser Recorder distinguishes between test cases and test suites. You can add 
one or more test cases and form a test suite. 


To save your tests for later use you can either save the individual test cases, or add the test 
cases to a test suite and then save the test suite. If the test cases of your test suite have 
not been saved, you'll be prompted to save them before saving the test suite. To save a test 
case/suite - in the "Test Suite' pane, select the test case/suite and then right-click on 
particular test case/suite to save. You cannot have any special characters except the 
underscore “ "in the file name. 


Note: Qualys Browser Recorder saves the test case or test suite files to a default location. 
To enable the option to save the file to a different location, go to the Chrome browser and 
then Settings » Advanced » Downloads. Enable the "Ask where to save each file before 
downloading" option. 


Downloads 


Location 
Change 
C:\Users\prsaha\Downloads 


Ask where to save each file before downloading ee 


Open certain file types automatically after downloading Clear 


To open a test case/suite in the ‘Test Suite' pane, click Open Test Suites on the toolbar, 
which lets you browse your existing file and when you open an existing test suite, Qualys 
Browser Recorder displays its commands in the command Pane. 
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Step 4: Running test cases 
Building Test Cases 


Step 4: Running test cases 


Oualys Browser Recorder allows many options 101 running your test case. You can execute 
a test case all at once, stop and start it, run one line at a time, run a single command you 
are currently developing, and you can do a batch run of an entire test suite. Execution of 

test cases is very flexible. 

Run a Test Case 


Select the test case and click the play button to play the current test case 


Run a Test Suite 

Select the test suite and click the play button to execute all the test cases in the currently 
loaded test suite. 

Stop and Start 


The Play button toggles between play and stop. When you execute the test case, you can 
use the same button to stop the test case while itis being executed. When you stop the 
test case, use the same stop button now to play the test case. 


Stop in the Middle 


You can set a breakpoint in the test case to cause it to stop on a particular command. This 
is useful for debugging your test case. To set a breakpoint, select a command, right-click, 
and select Toggle Breakpoint. 


Run Any Single Command 


Click any single command on command pane and then right-click and select 'Execute this 
command'. This is useful when you write a single command. It lets you immediately test a 
command you are constructing. You can run single command to see if it runs correctly. 


21 


Example 


Example 
Building Test Cases 


Let us build a sample test case to understand the seguence better. For example, let us 


record the steps needed to open Qualys website. 


Step 1: Open Qualys Browser Recorder and click Record. 


Test Suites E + Command Target 


+ 8& Ab 
Command 


Target 


Passed: 0 2160: 0 | Value 


Log Reference 


Step 2: Type the URL in the browser in the browser and perform few clicks. For every click, 


Qualys Browser Recorder displays a prompt on the screen. 


Command Recorded 
o command: click 
target: linkz Docs 


value: 
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Example 
Building Test Cases 


Step 3: After you complete the seguence of clicks, click Record button to stop the 
recording. Oualys Browser Recorder automatically populates all the actions in the editor 
pane. 


Test Suites gs Command Target 


Untitled Test Suite * open https://www.qualys.cor 


Untitled Test Case click span 


click link=Docs 


click link=Release Notes 


+ ü Ab 
Command 


Target 


Passed:0 Failed:9 | Value 


Log Reference 


Step 4: Save the test case and test suite. 


Test Suites E + Command Target Value 


Untitled Test Suite * open https:/www.qualys.cor 


Untitled Test C^^^— “allais. 
Save Test Case 


‘span 


link=Docs 
Rename Test Case 


ge Ir 


| 
| 
link=Release Notes 
Remove Test Case | 
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Example 
Building Test Cases 


Step 5: You can now replay the recorded steps. the background will change to light green 
color if the script gets executed successfully and the log statement gets printed. 


Fast | . 9 ° o Slow 


Test Suites & + Command Target 


Automation Test Suite open https://www.gualys.cor 
new click lispan 
Untitled Test Case click link=Docs 


click link=Release Notes 


+ ù & E 
Command 


Target 


Passed: 0 Failed: 0 Rue 


Log Reference 

—TTm 9, rest case passeo 
[info] Executing: | open | https://www.qualys.com/ | | 
[info] Wait for the new page to be fully loaded 
[info] Executing: | click | //span | | 
[info] Executing: | click | link-Docs | | 
[info] Wait for the new page to be fully loaded 
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Configure Input of Time-Based One-Time Password (TOTP) 


Configure Input of Time-Based One-Time 
Password (TOTP) 


Qualys Browser Recorder has been enhanced to allow your WAS scans to support two- 
factor authentication (2FA). This means you can use QBR to automate the input of a time- 
based one-time password (TOTP) token used for 2FA. The "sendTotp" command is used to 
provide the values that both QBR and the WAS scan engine need to generate the proper 
TOTP for your web application 


Use the sendTotp command for the form field that accepts input of the TOTP. You will 
need to configure the sendTotp command in the OBR script to specify the hashing 
algorithm, the number of digits, the time window in seconds, and the secret key. These 
values are required to generate the correct TOTP for a given point in time. 


With the sendTotp command, every time the script is run, either in QBR or by the WAS 
engine during a scan, the correct TOTP for that moment in time will be generated and 
entered into the field. 


Command Target Value 

open http://10.11.68.45/login 2/php-login-script-without-using-database/login.php 

click css-html 

sendKeys name=Username Alex 

sendKeys name=Password 123456 

fireEvent name=Password change 

click name=Submit 

click id=totp 3 
| sendTotp id=totp SHA-1, 6, 120, PEHMPSDNLXIOG65U ) 

fireEvent id=totp change i 

click css-input[type-"submit"] 

+ 8 Lal 
Command  sendTotp ~ 
Target id=totp E k Q 
Value SHA-1, 6, 120, PEHMPSDNLXIOG65U ba 
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Configure Input of Time-Based One-Time Password (TOTP) 


Input Arguments 

Parameter Description 

locator (Required) An element locator. 

settingsString (Required) Accepts these four arguments for token generation. 


Specify these four arguments in the settingsString parameter 
as a comma-separated values in the this order: 


1) hashing algorithm - Hashing algorithm to be used for 
calculating HMAC hash. The valid values are: SHA-1,SHA-256, 
and SHA-512. 


2) number of digits - Number of digits in the token. The 
standard token length is usually 6 to 8 digits long. 


3) time window - Number of seconds the token will remain 
valid, which is usually 30 seconds. 


4) secret key in base32 - Base 32 encoded secret key that will 
be hashed to generate the token. 


An example of settingsString: 
"SHA-1, 8, 60, GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ" 
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Troubleshooting: General GBR usage 
Troubleshooting 


Troubleshooting 


Troubleshooting: General GBR usage 


1) Save the script with .xml extension or specify a location for saving the 
script 


By default, OBR will save the file with a .html extension (it's still valid XML data - XHTML 
to be precise). If you enable "Ask where to save each file before downloading' in Chrome, 
then you can change the extension to .xml if desired and also decide where to save the 
file. It doesn't matter if you save the file with .xml or .html extension. Either will work for 
playback in QBR as well as Qualys WAS. 


2) Element not found when playing back the script 


When you record a script, targets are selected automatically. Occasionally, the resulting 
script will not find the target during playback. QBR allows you to choose a different 
representation of the target by selecting from the drop-down. See the screenshot below for 
an example. 


Test Suites & + Command Target Value 
Untitled Test Suite * open https://community.qualys.com/ 
Untitled Test Case * click css-span.nav-link.j-ui-elem > i.ic 
+ 0 9 B 
Command click 
Target css-span.nav-link.j-ui-elem > i.icon-search E x 
css=span.nav-link.j-ui-elem > i.icon-search 
Passed: 0 Failed: 0 Valua Ila[@id='j-nav-search'/span/i | 


ES //i[3/2/span/ si 


3) Manually identifying targets for GBR commands 


Identifying a target for your QBR commands can be challenging when manually editing a 
script. The easiest way is to continue recording your script after you authenticate. While 
still recording on a post-authentication page, click on an interactive element, such as a 
button or text. Stop the recording and replace the post-authentication "click" command 
you just recorded with the "waitForElementPresent' command. 


You can also manually add the command. First, pick an element on your web page, such 
as a button or text. Use your mouse to right click and select "Inspect". This will take you to 
a DOM view of the page and from here you can find a way to reference this element 
uniquely. Two common ways are by "id" or by css location. 
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In some applications, you will find buttons, labels, or form fields identified by id="name" 
where "name" is unique for that element. This is very often the easiest solution when 
available. For example: 


vw «div id="ext-comp-2838" class=" section-panel section-edit-panel x-form- 
label-top" style="width: 648px;"> 
w<div id="ext-gen2092" class="section-panel-header x-unselectable"> 
event 
<span id="ext-gen2095" class="section-panel-header-text"> 


Record Information</span> 
</div> 
b <div id="ext-gen2093" class="section-panel-bwrap">(-)</div> 
</div> 


Here you can clearly see there is an element in a span section called id="ext-gen2095”. To 
use this in your script, set it as the target for your command: 


Command Target Value 


waitForElementPresent id="ext-gen2095” 


If you are familiar with using your browser’s developer tools to access the console, you 
can use the following command to pull out all the id="name" references: 


document.querySelectorAll('[id]:not([id=""])’) 


» document.querySelectorAll(' [id] :not( [id=""])") 
€ w NodeList(2020) 


: <body id="ext-gen3" class-"ext-gecko ext-gecko3 ext-mac x-border-layout-ct"> Ó 
: <div id="ext-comp-1037" class=" main-frame-header x-border-panel x-box-layout-ct" style="height: 11@px; left: @px; top: @px; width: 1200px;"> © 
<div id="ext-gen19" class="x-box-inner" style="width: 1200px; height: 110px;"» Ó 


«div id="ext-comp-1038" class=" header-logo x-box-item ux-layout-center" style="width: 1200px; height: 4@px; left: 6px; top: @px;"> Q 

: <div ids"FramelogoHeader" class=" ux-layout-center-item" style="width: 128@px; height: 40px;"> © 

<div id="ext-comp-1032" class=" x-box-item x-box-layout-ct" style="width: 1200px; height: 70px; left: 6px; top: 4@px;"> Ó 

: <div ids"ext-gen22" classs"x-box-inner" style="width: 1200px; height: 70px;"> © 

: <div id="ext-como-1028" class=" frame-main-bar x-box-item ux-lavout-center" stvle="heioht: 360x: width: 12000x: left: 60x: ton: @ox:"> ^ 


NOWSWNRS 


If you cannot find an id="name" element or need to target an element that does not use id, 
you can also use a css location and match against anything in quotes. This target will use 
the following format: css=<css_element>:contains("<some text>"). Using the same 
screenshot as above, you can also reference the same target using 
css=span:contains("section-panel-header-text") and leverage the class name. 


In this example, our QBR script would look like this: 


Command Target Value 
waitForElementPresent css=span:contains(“section-panel-header- 
text") 
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4) Activating fields that require user action 


Sometimes a user action, such as clicking, is required before the fields in a form become 
active. In this case, you need to use the mouse to click the field for it to get populated. In 
that scenario, the "keyPress" command can be used to activate the field as part of the 
script playback. 


Below is an example script where the keyPress command is used. 


<?xml version-"1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD 
XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtm11/DTD/xhtmli-strict.dtd"» 
«html xmlns="http://www.w3.0rg/1999/xhtml" xml:lang-"en" lang="en"><head 
profile-"http://selenium-ide.openga.org/profiles/test-case"»«meta http- 
equiv-"Content-Type" content-"text/html; charset-UTF-8" /»«link 
rel-"selenium.base" href-"https://example.com/Login.aspx" /> 

«title»test3 good«/title»«/head»«body»«table cellpadding-"1" cellspacing-"1" 
border="1"><thead><tr><td rowspan-"1" colspan-"3"»test3 good«/td»«/tr» 
</thead><tbody><tr> <td>open</td> 

<td>https://example.com/Login.aspx</td> <td></td></tr><tr> 


«td»waitForElementPresent«/td» «td»css-b«/td» «td»«/td»«/tr»«tr» 
«td»click«/td» «td»cbAgree«/td» <td></td></tr><tr> <td>type</td> 
<td>id=rtbEmail</td> <td>qualys@example.com</td></tr><tr> 
<td>keyPress</td> «td»id-rtbEmail«/td» <td>\13</td></tr><tr> 
<td>type</td> <td>id=rtbPassword</td> <td>10K4you2use</td></tr><tr> 
«td»keyPressAndWait«/td» «td»id-rtbPassword«/td» <td>\13</td></tr> 
<tr> «td»clickAndWait«/td» <td>id=btnSubmit</td> <td></td></tr> 


<tr> <td>waitForElementPresent</td> 
<td>ctl00$NavBar1$btnLogout</td> «td»«/td»«/tr»«/tbody»«/table»«/body» 
«/html» 


5) Handling a popup window 


Some application may use a popup window during the authentication process or other 
activity. If so, you may need to add a "waitForPopUp" command with a target of title and 
the popup window's title. Also add a "selectWindow" command to ensure the popup 
window is selected. Then, use the sendKeys and click commands as you normally would 
to submit the login form. 


«tr» 
<td>click</td> 
<td>id=loginButton</td> 
<td></td> 

</tr> 

<tr> 
<td>waitForPopUp</td> 
<td>title=Quick Login</td> 
<td>50000</td> 

</tr> 

<tr> 


29 


Troubleshooting: Script playback in Gualys WAS scan 
Troubleshooting 


<td>selectWindow</td> 
<td>name=login</td> 
<td></td> 

</tr> 

<tr> 
<td>sendKeys</td> 
<td>name=user</td> 
<td>testuser</td> 

</tr> 


Troubleshooting: Script playback in Qualys WAS scan 


1) Review QID 150100 (Selenium Diagnostics) in your scan report 


Once your WAS scan has finished, view the scan report and look under Information 
Gathered for OID 150100. This is where you will find diagnostic information for the script. 
You should see each command in your script executing. lí the scanner ran into a problem, 
you will see it here and can take appropriate corrective action. 


You may see an error, for example, that says an element could not be found. If that's the 
case, try adding "waitForPageToLoad" command with a value 50000 milliseconds to your 
script. Alternatively, it may help to add a "waitForelementPresent" command as explained 
in the next section. 


2) Verifying that authentication was successful during the scan 


After uploading the authentication script into Qualys WAS, you must specify a regular 
expression to verify that the authentication completed successfully. The regular 
expression must match against the very first response received after the script executes. 
For example, if the last command is to click on a submit button (generating a POST 
request to the server), the server response must have a match for the regex you've 
specified. This is how WAS verifies that authentication succeeded. It can match against 
the displayed text of even against content found in the HTML source code itself. 


In older web applications, a simple regex of "logout" was often sufficient as this was 
usually part of this initial response back. However, many new applications, including most 
dynamic/AJAX web apps, will often first respond back with a script that loads other 
content. Remember, only the first response back is checked for the regular expression 
match. In this case, your validation regular expression may fail even if you are 
successfully authenticated. 


A more versatile method to ensure you are authenticated and pass the validation regular 
expression match is to leverage the QBR script itself to check for the presence of an 
element only available on an authenticated page and use a "dummy" regular expression 
(such as ".*") within WAS for the validation regex. In this scenario, the script will run to 
completion only if it finds an element present on ANY post authentication page that is 
loaded. You can check QID 150100 in the WAS scan report to see all script commands that 


executed. 
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After this has occurred, the validation regular expression will match against ANYTHING 
and OID 150094 will report you are successfully authenticated. If, however, the QBR script 
fails to execute fully, and it cannot find the target element on the post-authentication 
page, then OID 150100 will report that the script did not successfully execute fully and 
OID 150095 will report the OBR script failed to authenticate to the application. 


To implement this method, please see the section for "The WaitForElementPresent 


Command" to adjust your QBR script, and use ".*" (without the quotes) for your validation 
regex within WAS as shown in the screenshot below. 


Selenium (Automated Authentication) 


video chrome extension 


Script: Qualys Browser Recorder Script Download View Change 


regular expression 


Validation Regular Expression* 


a 


3) Leveraging "waitForElementPresent' for successful playback in WAS 


The "waitForElementPresent' command in a QBR script can be used for a variety of 
practical and useful operations. For example, if you need to add a delay to a command to 
allow time for dynamic content on a web application to fully load, you can use the 
"waitForElementPresent" command to pause execution until the target element is loaded 
and available. 


A good application of this is when attempting to use the "sendKeys" command to pass in 
the username for a WAS authentication record. After the page is accessed, instead of 
immediately going to the sendKeys command, you can first use the 
"waitForElementPresent" command to slow the script playback down until the necessary 
fields have loaded/rendered. 


For example, if the form field for the username is identified by id=user, you could modify 
your QBR script to add a "waitForElementPresent" command after the initial open 
command. Another useful scenario is to use it at the end of your script to verify you have 
successfully authenticated. This is shown in bold below. 


Command Target Value 


open https://www.myapp.com 


waitForElementPresent Id=user 


sendkeys Id=user John.Smith 
sendkeys Id=password P@$$w0rd123 
click Id=submit 


waitForElementPresent Id-logout 
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The script itself gives you greater flexibility in confirming authentication compared to the 
validation regex within WAS. You just need to find an element that only appears in the 
post-authentication page. You can use text or elements from the DOM. 


For example, you may have a button on the page labeled "Log Out". To use this for the 
waitForElementPresent command, you have to identify this button by its element and not 
by the text itself. So "Log Out" won't work, but id=logout will if this is how the button is 
referenced. 


In this example, you would add the waitForElementPresent as your final command in your 
QBR authentication script. For example: 


See the issue on "Manually identifying targets for QBR commands" to better understand 
how to find elements for modifying your QBR scripts. 


4) Prevent auto-login when recording an authentication script 


When recording your authentication script using OBR, you may need to utilize Chrome's 
Incognito Mode. This is sometimes necessary because applications will seamlessly 
authenticate you due to existing cookies, local storage, Windows Integrated login, etc. 
During a WAS scan, of course, the scanner does not have access to this data. It interacts 
with the web application using a "clean" history, so it is important to record your script 
from that perspective. 


Simply open a Chrome Incognito window and record your script there. Note you may need 
to activate OBR for use in Incognito Mode by enabling the "Allow in incognito" setting for 
the extension in Chrome. 


5) Using a single authentication script for different apps that use a 
common SSO 


f you need to scan a web application that uses single sign-on (SSO), you will most likely 
need to use a Selenium script for Qualys WAS to successfully authenticate (more 
information). If you have multiple web apps that use the same SSO mechanism, you may 
find that your authentication scripts are identical except for the URL of the initial open 
command. If that's the case, you can edit the script manually using a text editor and 
replace the URL with "®@webappURL@@" (without the quotes). This is known as a WAS 
parameter. When the script is played back during the WAS scan, the scanner will 
recognize the WAS parameter and replace it with the web application's target URL. 


This can greatly simplify management of your scripts because you can have a single 
authentication script that works across many different web apps. 


Below is a snippet of a Selenium script that uses a WAS parameter (highlighted). 


«tr» 
<td>open</td> 
<td>@@webappURL@@</td> 
<td></td> 

</tr> 

<tr> 
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<td>sendKeys</td> 
<td>name=email</td> 
<td>test@example.com</td> 

</tr> 

<tr> 
<td>sendKeys</td> 
<td>name=password</td> 
<td>mypass</td> 

</tr> 

<tr> 
<td>click</td> 
<td>id=SignInButton</td> 
<td></td> 

</tr> 


Troubleshooting: Script playback in Qualys WAS scan 
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Command Reference 


This chapter lists all the commands available in the Oualys Browser Recorder. 
A 

addLocationStrategy 

addLocationStrategyAndWait 

addScript 

addScriptAndWait 


addSelection 


addSelectionAndWait 
allowNativeXpath 
allowNativeXpathAndWait 
altKeyDown 
altKeyDownAndWait 
altKeyUp 
altKeyUpAndWait 
answerOnNextPrompt 
assertAlert 
assertAlertAndWait 
assertAlertNotPresent 
assertAlertPresent 
assertAllButtons 
assertAllFields 
assertAllLinks 
assertAllWindowlds 
assertAllWindowNames 
assertAllWindowTitles 
assertAttribute 
assertAttributeFromAllWindows 
assertBodyText 
assertChecked 
assertChildWindowName 
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assertConfirmation 
assertConfirmationAndWait 
assertConfirmationNotPresent 
assertConfirmationPresent 
assertCookie 
assertCookieByName 
assertCookieNotPresent 
assertCookiePresent 
assertCssCount 
assertCursorPosition 
assertEditable 
assertElementHeight 
assertElementIndex 
assertElementNotPresent 
assertElementPositionLeft 
assertElementPositionTop 
assertElementPresent 
assertElementWidth 
assertEval 

assertExpression 
assertHtmlSource 
assertLocation 
assertMouseSpeed 
assertNotAlert 
assertNotAllButtons 
assertNotAllFields 


assertNotAllLinks 
assertNotAllWindowlds 
assertNotAllWindowNames 


assertNotAllWindowTitles 


assertNotAttribute 
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assertNotAttributeFromAllWindows 
assertNotBody Text 
assertNotChecked 
assertNotChildWindowName 
assertNotConfirmation 
assertNotCookie 
assertNotCookieByName 
assertNotCssCount 
assertNotCursorPosition 
assertNotEditable 
assertNotElementHeight 
assertNotElementIndex 
assertNotElementPositionLeft 
assertNotElementPositionTop 
assertNotElementWidth 
assertNotEval 
assertNotExpression 
assertNotHtmlSource 
assertNotLocation 
assertNotMouseSpeed 
assertNotOrdered 
assertNotPrompt 
assertNotSelectOptions 
assertNotSelectedId 
assertNotSelectedIds 
assertNotSelectedIndex 
assertNotSelectedIndexes 
assertNotSelectedLabel 
assertNotSelectedLabels 


assertNotSelectedValue 


assertNotSelectedValues 
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assertNotSomethingSelected 
assertNotSpeed 
assertNotTable 


assertNot Text 


assertNotTitle 
assertNotValue 
assertNotVisible 


assertNotWhetherThisFrameMatchFrameExpression 


assertNotWhetherThisWindowMatchWindowExpression 


assertNotXpathCount 
assertOrdered 
assertPrompt 
assertPromptAndWait 
assertPromptNotPresent 
assertPromptPresent 
assertSelectOptions 
assertSelectedId 
assertSelectedIds 
assertSelectedIndex 
assertSelectedIndexes 
assertSelectedLabel 
assertSelectedLabels 
assertSelectedValue 


assertSelectedValues 


assertSomethingSelected 
assertSpeed 

assertTable 

assertText 
assertTextAndWait 


assertTextNotPresent 


assertTextPresent 
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assertTitle 


assertTitleAndWait 
assertValue 
assertVisible 


assertWhetherThisFrameMatchFrameExpression 


assertWhetherThisWindowMatchWindowExpression 
assertXpathCount 

assignid 

assignidAndWait 


B 
break 


C 

captureEntirePageScreenshot 
captureEntirePageScreenshotAndWait 
check 

checkAndWait 
chooseCancelOnNextConfirmation 
chooseCancelOnNextPrompt 
chooseCancelOnNextPromptAndWait 
chooseOkOnNextConfirmation 
chooseOkOnNextConfirmationAndWait 
click 

clickAndWait 

clickAt 

clickAtAndWait 

close 

contextMenu 

contextMenuAndWait 

contextMenuAt 


contextMenuAtAndWait 


controlKeyDown 
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controlKeyDownAndWait 
controlKeyUp 
controlKeyUpAndWait 
createCookie 
createCookieAndWait 

D 

deleteAllVisibleCookies 
deleteAllVisibleCookiesAndWait 
deleteCookie 
deleteCookieAndWait 
deselectPopUp 
deselectPopUpAndWait 
doubleClick 
doubleClickAndWait 
doubleClickAt 


doubleClickAtAndWait 
dragAndDrop 
dragAndDropAndWait 
dragAndDropToObject 
dragAndDropToObjectAndWait 


E 
echo 


echoAndWait 
editContent 
editContentAndWait 
F 

fireEvent 
fireEventAndWait 
focus 


focusAndWait 
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G 
goBack 


goBackAndWait 

H 

highlight 

highlightAndWait 

| 

ignoreAttributesWithoutValue 
ignoreAttributesWithoutValueAndWait 
K 
keyDown 
keyDownAndWait 
keyPress 
keyPressAndWait 
keyUp 


keyUpAndWait 

M 

metaKeyDown 
metaKeyDownAndWait 
metaKeyUp 
metaKeyUpAndWait 
mouseDown 
mouseDownAndWait 
mouseDownAt 
mouseDownAtAndWait 
mouseDownRight 
mouseDownRightAndWait 
mouseDownRightAt 
mouseDownRightAtAndWait 


mouseMove 


mouseMoveAndWait 
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mouseMoveAt 
mouseMoveAtAndWait 
mouseOut 
mouseOutAndWait 
mouseOver 
mouseOverAndWait 
mouseUp 
mouseUpAndWait 
mouseUpAt 
mouseUpAtAndWait 
mouseUpRight 
mouseUpRightAndWait 
mouseUpRightAt 
mouseUpRightAtAndWait 


open 
openWindow 
openWindowAndWait 


P 
pause 


R 

refresh 

refreshAndWait 
removeAllSelections 
removeAllSelectionsAndWait 
removeScript 
removeScriptAndWait 
removeSelection 
removeSelectionAndWait 
rollup 

rollupAndWait 
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runScript 
runScriptAndWait 

S 

select 

selectAndWait 
selectFrame 
selectPopUp 
selectPopUpAndWait 
selectWindow 

sendKeys 
sendKeysAndWait 
sendTotp 
setCursorPosition 
setCursorPositionAndWait 
setMouseSpeed 
setMouseSpeedAndWait 
setSpeed 


setSpeedAndWait 


setTimeout 
shiftKeyDown 
shiftKeyDownAndWait 
shiftKeyUp 
shiftKeyUpAndWait 
showElement 
showElementAndWait 
store 

storeAlert 
storeAlertPresent 
storeAllButtons 
storeAllFields 
storeAllLinks 
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storeAllWindowlds 
storeAllWindowNames 
storeAllWindowTitles 
storeAndWait 
storeAttribute 
storeAttributeFromAllWindows 
storeBodyText 
storeChecked 
storeChildWindowName 
storeConfirmation 
storeConfirmationPresent 
storeCookie 
storeCookieByName 
storeCookiePresent 
storeCssCount 
storeCursorPosition 
storeEditable 
storeElementHeight 
storeElementIndex 
storeElementPositionLeft 
storeElementPositionTop 
storeElementPresent 
storeElementWidth 
storeEval 
storeExpression 
storeHtmlSource 
storeLocation 
storeMouseSpeed 
storeOrdered 
storePrompt 


storePromptPresent 
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storeSelectOptions 
storeSelectedId 
storeSelectedIds 
storeSelectedIndex 
storeSelectedIndexes 
storeSelectedLabel 
storeSelectedLabels 
storeSelectedValue 


storeSelectedValues 


storeSomethingSelected 
storeSpeed 

storeTable 

storeText 
storeTextAndWait 
storeTextPresent 


storeTitle 


storeTitleAndWait 
storeValue 
storeVisible 


storeWhetherThisFrameMatchFrameExpression 


storeWhetherThisWindowMatchWindowExpression 
storeXpathCount 

submit 

submitAndWait 

1 

type 

typeAndWait 

typeKeys 

typeKeysAndWait 


U 
uncheck 
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uncheckAndWait 


useXpathLibrary 


useXpathLibraryAndWait 


ifyAlert 
ifyAlertNotPresent 
ifyAlertPresent 
ifyAllButtons 
ifyAllFields 

ifyAllLinks 
ifyAllWindowlds 
ifyAllWindowNames 
ifyAllWindowTitles 
ifyAttribute 
ifyAttributeFromAllWindows 
ifyBody Text 

ifyChecked 
ifyChildWindowName 
ifyConfirmation 
ifyConfirmationNotPresent 
ifyConfirmationPresent 
ifyCookie 
ifyCookieByName 
ifyCookieNotPresent 
ifyCookiePresent 
ifyCssCount 
ifyCursorPosition 
ifyEditable 
ifyElementHeight 


ifyElementIndex 


ifyElementNotPresent 
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ver 


ver 


veri 


ver 


veri 


ver 


ver 


ve 


HW 


veri 


ver 


ver 


ver 


veri 
veri 


veri 


ver 


veri 
veri 


veri 


ver 


ver 


veri 
veri 


veri 


ver 


veri 
veri 
veri 


veri 


ver 


veri 


ifyNotAlert 


ifyElementPositionLeft 


ifyElementPositionTop 


fyElementPresent 


ifyElementWidth 


fyEval 


ifyExpression 
ifyHtmlSource 


ifyLocation 


fyMouseSpeed 


NotAllButtons 


ifyNotAllFields 


NotAllLinks 


ifyNotAllWindowTitles 


NotAttribute 
NotAttributeFromAl]l Windows 


ifyNotChildWindowName 


NotConfirmation 


a 


NotCssCount 
NotCursorPosition 
NotEditable 
NotElementHeight 


oc ol c 


NotElementIndex 


yNotElementPositionLeft 


fyNotElementPositionTop 


46 


Command Reference 


7611 
7611 
7611 
7611 
7611 
7611 
7611 
7611 
veri 
veri 
veri 
veri 


veri 


ver 


veri 
veri 
veri 
veri 
veri 
veri 
veri 
veri 
veri 
veri 
veri 
veri 


veri 


ve 


[e] 


veri 


veri 


ver 


fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
ifyNotSelectedLabel 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 
fy 


NotElementWidth 
NotEval 
NotExpression 
NotHtmlSource 
NotLocation 
NotMouseSpeed 
NotOrdered 
NotPrompt 
NotSelectOptions 
NotSelectedId 
NotSelectedIds 
NotSelectedIndex 


NotSelectedIndexes 


NotSelectedLabels 
NotSelectedValue 


NotSelectedValues 


NotSomethingSelected 
NotSpeed 

NotTable 

NotText 


NotTitle 
NotValue 
NotVisible 


NotWhetherThisFrameMatchFrameExpression 


NotWhetherThisWindowMatchWindowExpression 


NotXpathCount 


ifyOrdered 


fyPrompt 
fyPromptNotPresent 


ifyPromptPresent 


47 


Command Reference 


fy’ 
fy’ 
fy’ 
ifyTextNotPresent 
fy’ 
fy’ 
fy’ 


ifySelectOptions 
ifySelectedId 
ifySelectedIds 
ifySelectedIndex 
ifySelectedIndexes 
ifySelectedLabel 
ifySelectedLabels 
ifySelectedValue 


ifySelectedValues 


ifySomethingSelected 
ifySpeed 


Table 


ext 


TextAndWait 


l'extPresent 


Title 


litleAndWait 


ityValue 
ifyVisible 


ifyXpathCount 


itForAlert 
itForAlertNotPresent 
itForAlertPresent 
itForAllButtons 
itForAllFields 
itForAllLinks 
itForAllWindowlds 


ifyWhetherThisFrameMatchFrameExpression 


ifyWhetherThis WindowMatchWindowExpression 
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itForAllWindowNames 
itForAllWindowTitles 
itForAttribute 
itForAttributeFromAllWindows 
itForBodyText 

itForChecked 
itForChildWindowName 
itForCondition 
itForConfirmation 


itForConfirmationNotPresent 


itForConfirmationPresent 
itForCookie 
itForCookieByName 
itForCookieNotPresent 
itForCookiePresent 
itForCssCount 
itForCursorPosition 
itForEditable 
itForElementHeight 
itForElementIndex 
itForElementNotPresent 
itForElementPositionLeft 
itForElementPositionTop 
itForElementPresent 
itForElementWidth 
itForEval 

itForExpression 
itForFrameToLoad 
itForHtmlSource 
itForLocation 


itForMouseSpeed 
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itForNotAlert 
itForNotAllButtons 
itForNotAllFields 
itForNotAllLinks 
itForNotAllWindowlds 
itForNotAllWindowNames 
itForNotAllWindowTitles 
itForNotAttribute 
itForNotAttributeFromAllWindows 
itForNotBodyText 
itForNotChecked 
itForNotChildWindowName 
itForNotConfirmation 
itForNotCookie 
itForNotCookieByName 
itForNotCssCount 
itForNotCursorPosition 
itForNotEditable 
itForNotElementHeight 
itForNotElementIndex 
itForNotElementPositionLeft 
itForNotElementPositionTop 
itForNotElementWidth 
itForNotEval 
itForNotExpression 
itForNotHtmlSource 
itForNotLocation 
itForNotMouseSpeed 
itForNotOrdered 
itForNotPrompt 


itForNotSelectOptions 
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itForNotSelectedId 
itForNotSelectedIds 
itForNotSelectedIndex 
itForNotSelectedIndexes 
itForNotSelectedLabel 
itForNotSelectedLabels 
itForNotSelectedValue 


itForNotSelectedValues 


itForNotSomethingSelected 
itForNotSpeed 
itForNotTable 

itForNotText 


itForNotTitle 
itForNotValue 
itForNotVisible 


itForNotXpathCount 
itForOrdered 
itForPageToLoad 
itForPopUp 
itForPrompt 
itForPromptNotPresent 
itForPromptPresent 
itForSelectOptions 
itForSelectedId 
itForSelectedlIds 
itForSelectedIndex 


itForSelectedIndexes 


itForSelectedLabel 
itForSelectedLabels 


itForNotWhetherThisFrameMatchFrameExpression 


itForNotWhetherThisWindowMatchWindowExpression 
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waitForSelectedValue 


waitForSelectedValues 


waitForSomethingSelected 


waitForSpeed 


waitForl 
waitForl 
waitForl 


waitForl 


waitForl 


Table 
Text 
l'extNotPresent 
TextPresent 


Title 


waitForValue 


waitForVisible 


waitForWhetherThisFrameMatchFrameExpression 


waitForWhetherThisWindowMatchWindowExpression 


waitForXpathCount 


windowFocus 


windowFocusAndWait 


windowMaximize 


windowMaximizeAndWait 


52 


Command Reference 


